This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft File: GF_2ZH4elndQE3e1UVR5uelGEGc.mft (raw, json) Hash identifier: 43tjl9o7+AurbO7QtX6TwLW/L+6uQOek84SyyyExoK0= Subject key identifier: B3:C4:A0:E4:57:03:96:65:77:3E:34:98:91:B9:3A:77:78:03:E8:E9 Authority key identifier: 18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 Certificate issuer: /CN=A9193C85/serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Certificate serial: 11FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft Manifest number: 11F1 Signing time: Mon 22 Dec 2025 17:14:40 +0000 Manifest this update: Mon 22 Dec 2025 17:14:39 +0000 Manifest next update: Mon 29 Dec 2025 17:14:39 +0000 Files and hashes: 1: GF_2ZH4elndQE3e1UVR5uelGEGc.crl (hash: tBtN4Iz32DK73e6v/rkQEC4iWowCzV9QQqsownHL4WI=) 2: A1E87910832A11ECA409521EC4F9AE02.roa (hash: xYDqnqdst+l+d2xUst0ExZqgZXxkDEzycJdTuNx9ikg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4605 (0x11fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193C85, serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Validity Not Before: Dec 22 17:14:39 2025 GMT Not After : Dec 29 17:14:39 2025 GMT Subject: CN=69497c80-0fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:36:00:0e:80:6b:48:9d:20:98:3d:09:76:95: 05:fc:0b:32:a3:41:47:8e:aa:bf:e2:b3:76:15:4a: 54:14:e9:a7:59:03:ff:64:5c:3d:41:f2:5a:f7:b7: 1c:50:c3:07:9f:4d:34:94:e8:e1:66:b2:8d:88:ca: 99:17:7b:fe:8e:93:e2:d3:0a:dc:25:bc:ba:69:a6: 1d:b6:67:cd:d1:2c:a0:76:f2:09:55:f8:18:23:19: ea:28:a2:18:48:e2:30:ec:e0:bc:15:92:60:ea:f0: ba:fb:7f:c2:87:55:07:f3:7a:26:be:a7:dc:cd:f2: 6a:bd:ea:73:03:0a:67:18:a8:9f:30:e1:25:56:19: 7c:a3:7b:cf:85:07:e9:35:5c:89:39:74:5e:01:48: 72:60:53:5f:0f:79:92:0c:d0:bb:89:d6:7f:4c:13: 1e:c2:80:c1:80:b7:cb:39:f7:93:bb:30:84:4d:b3: 02:2d:b4:4c:7a:75:5b:ee:ff:da:f8:f5:3a:58:ab: 14:24:9a:a2:97:2a:3f:5e:97:4f:df:a5:68:f8:ac: 61:18:e1:ba:0f:e8:1c:63:bf:80:6f:d1:73:ce:20: a9:f4:06:3d:55:aa:e6:fb:ff:15:9d:3b:2b:96:be: 02:b8:d1:2f:c8:5e:51:14:c5:12:ff:99:f6:35:92: 37:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C4:A0:E4:57:03:96:65:77:3E:34:98:91:B9:3A:77:78:03:E8:E9 X509v3 Authority Key Identifier: keyid:18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:43:61:99:b6:21:71:e6:8e:2b:96:09:cd:79:31:94:ec:44: 89:81:91:03:12:5c:cb:69:4f:3e:61:5f:c2:95:01:44:39:93: ac:ec:da:7a:00:6b:02:92:34:a6:e2:6f:30:8a:34:e9:11:07: 06:83:9a:5f:f0:e5:97:3c:ea:39:4d:5d:d2:49:06:ef:b6:ec: bb:bc:c5:7e:e6:d2:db:2b:87:97:4a:bb:24:c9:b8:1d:e8:85: 6d:28:3d:06:e2:a6:ce:4e:a4:68:e3:ae:fc:0e:2a:5f:cd:4f: f6:38:25:af:3e:b2:3a:25:c0:55:9d:58:61:2c:46:b3:ad:9b: 57:b6:0a:e6:a3:84:fd:61:b0:cd:ce:0e:56:52:2d:aa:4c:23: 18:0d:8e:b0:a2:a8:50:a2:0d:a7:aa:9a:fd:e1:1a:18:82:8e: ea:fd:8b:43:de:87:b5:44:b2:f0:4a:97:90:56:85:83:84:d3: 62:2f:0d:83:48:34:ce:4d:ca:2e:57:d7:e6:e6:b9:85:aa:96: 82:69:11:87:18:a3:cb:be:dc:06:70:11:64:6f:f0:8d:35:cd: 20:ea:03:f7:d5:2c:20:cb:fb:6b:0f:58:fa:8b:9a:8e:2e:7d: 41:6b:a1:7b:94:2a:0a:9a:09:9d:0d:ef:e4:0e:b7:3c:1b:39: fd:be:7d:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx OTNDODUxMTAvBgNVBAUTKDE4NUZGNjY0N0UxRTk2Nzc1MDEzNzdCNTUxNTQ3OUI5 RTk0NjEwNjcwHhcNMjUxMjIyMTcxNDM5WhcNMjUxMjI5MTcxNDM5WjAYMRYwFAYD VQQDDA02OTQ5N2M4MC0wZmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzYADoBrSJ0gmD0JdpUF/Asyo0FHjqq/4rN2FUpUFOmnWQP/ZFw9QfJa97cc UMMHn000lOjhZrKNiMqZF3v+jpPi0wrcJby6aaYdtmfN0SygdvIJVfgYIxnqKKIY SOIw7OC8FZJg6vC6+3/Ch1UH83omvqfczfJqvepzAwpnGKifMOElVhl8o3vPhQfp NVyJOXReAUhyYFNfD3mSDNC7idZ/TBMewoDBgLfLOfeTuzCETbMCLbRMenVb7v/a +PU6WKsUJJqilyo/XpdP36Vo+KxhGOG6D+gcY7+Ab9FzziCp9AY9Varm+/8VnTsr lr4CuNEvyF5RFMUS/5n2NZI3dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPEoORX A5Zldz40mJG5Ond4A+jpMB8GA1UdIwQYMBaAFBhf9mR+HpZ3UBN3tVFUebnpRhBn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0M4NS80RkY0Q0I3MkZE RTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxuZFFFM2UxVVZSNXVlbEdF R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dGXzJaSDRlbG5kUUUzZTFVVlI1dWVsR0VHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0M4NS80RkY0Q0I3MkZERTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxu ZFFFM2UxVVZSNXVlbEdFR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7Q2GZtiFx5o4rlgnNeTGU7ESJgZEDElzLaU8+YV/ClQFEOZOs7Np6 AGsCkjSm4m8wijTpEQcGg5pf8OWXPOo5TV3SSQbvtuy7vMV+5tLbK4eXSrskybgd 6IVtKD0G4qbOTqRo4678DipfzU/2OCWvPrI6JcBVnVhhLEazrZtXtgrmo4T9YbDN zg5WUi2qTCMYDY6woqhQog2nqpr94RoYgo7q/YtD3oe1RLLwSpeQVoWDhNNiLw2D SDTOTcouV9fm5rmFqpaCaRGHGKPLvtwGcBFkb/CNNc0g6gP31Swgy/trD1j6i5qO Ln1Ba6F7lCoKmgmdDe/kDrc8Gzn9vn0i -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:50 2025 by rpki-client